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Abstract 

The Industrial Internet of Things (MoT) is one of the popular technologies of Industry 4.0. This technology involves 
of advanced equipment such as sensors, machines, and analytics platforms in industrial settings. The utilized 
equipment has been harnessed to improve efficiency, productivity, and safety. IoT forensics is a specialized field of 
digital forensics that deals with the investigation of IoT devices. In terms of digital forensics, there are several open 
challenges, including the need for more effective data acquisition techniques, the need for better tools and techniques 
for analyzing IoT data, and the need for more research on the legal and ethical implications of IoT forensics. 
However, the increasing use of IoT devices and systems is presenting new challenges, including data security, privacy, 
and safety. These challenges became an incentive for the inclusion of Blockchain technology (BCT) which is 
considered one of the most famous Industry 4.0 technologies in securing data and transactions. Wherein, BCT offers 
a solution to some IoT security challenges, including data integrity, authentication, access control, confidentiality, 
transparency, scalability, resilience, and provenance. Hence, leveraging BCT in ambiances where tampering is 
prevalent, and counterfeiting has become imperative. In this light, BCT can be used in digital forensics due to its 
ability to construct a transparent environment that is characterized by decentralized and immutable in the event of 
safety accidents or cyber-attacks. Without a doubt, in such an environment, selecting and utilizing an adequate BC 
application for preventing any data alteration unless there is consensus on that is important. Accordingly, this matter 
is considered the catalyst in this paper for constructing a robust intelligent appraiser model for appraising the available 
nominates of BC applications. In the context of selecting and implementing a blockchain-based digital forensic 
scheme within the HoT communication architecture, the techniques of Multi-Criteria Decision Making (MCDM) are 
considered a strong contributor. Wherein these techniques can help balance various criteria that preferences amongst 
BC applications are based on. Hence, Entropy and Additive Ratio Assessment (ARAS) are contributing to 
constructing the proposed intelligent appraiser model as techniques of MCDM. As well these techniques are working 
under the authority of Type-2 neturosophic numbers (T2NN) which are considered one of the popular members of 
Neutrosophic uncertainty theory. 
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1 | Introduction 


The Industrial Internet of Things (IIoT) is crucial to the fourth industrial revolution. The HoT refers to 
integrating advanced sensors, machines, and analytics platforms in industrial settings to improve efficiency, 
productivity, and safety [1]. In the fourth industrial revolution 4.0 context, the IoT is integral to transforming 
cyber-physical systems and production processes with big data and analytics [2]. This connectivity allows for 
data collection, exchange, and analysis, potentially facilitating improvements in productivity, efficiency, and 
other economic benefits [3]. HoT applications include predictive maintenance, remote monitoring and 
control, asset tracking, and process automation [4]. These applications rely on collecting and analyzing large 
volumes of data from various sources, including sensors, machines, and other devices, then analyzing and 
exchanging data in real- time, enabling organizations to make informed decisions and optimize their 
operations [5]. HoT devices are increasingly used in various industries, generating vast amounts of data that 
can be crucial in digital investigations [6]. 


IoT forensics is a specialized field of digital forensics investigating IoT devices [7]. In digital forensics, there 
are several open challenges, including the need for more effective data acquisition techniques, better tools 
and techniques for analyzing HoT data, and more research on the legal and ethical implications of HoT 
forensics [8]. However, the increasing use of HoT devices and systems presents new challenges, including 
data security, privacy, and safety [9]. Blockchain technology can address some of the critical security challenges 
faced by IoT, such as data integrity, authentication, access control, confidentiality, transparency, scalability, 
resilience, and provenance [10]. Blockchain is a decentralized ledger technology operating on a peer-to-peer 
network, distributing data across multiple nodes. It is known for its unparalleled security, transparency, and 
immutability [11]. Integrating blockchain technology with HoT is a promising concept that can revolutionize 
industries’ operations. This can be achieved through various strategies such as developing custom blockchain 
solutions, optimizing scalability and speed, ensuring interoperability with existing systems, implementing 
intelligent contracts efficiently, enhancing data privacy, and implementing robust security protocols [12]. By 
using blockchain, IloT devices can securely transmit and store data, ensuring that the data is tamper-proof 
and transparent. This can be particularly useful in manufacturing, logistics, and energy industries, where data 
integrity and security are critical [13]. However, it also presents challenges such as scalability, interoperability, 
data privacy, and real-time processing [14]. 


Blockchain technology can address data integrity and authentication challenges in IloT by providing a 
decentralized and secure platform for data storage and sharing [15]. In a blockchain-based system, data is 
stored in a distributed ledger maintained by multiple network nodes [16]. Each block in the chain contains a 
cryptographic hash of the previous block, creating a tamper-evident chain of blocks. This ensures data 
integrity, as any modification to the data would change the hash value, making it easy to detect tampering 
attempts [17]. In digital forensics, blockchain technology can create a transparent record of evidence 
collection, analysis, and preservation. This is particularly useful in oT environments, where the integrity of 
data and evidence is crucial [18]. By leveraging blockchain's decentralized and immutable nature, digital 
forensics investigators can ensure that evidence is collected, analyzed, and stored securely and transparently. 
This can help to prevent tampering, alteration, or deletion of evidence, which is critical in maintaining the 
integrity of digital forensic investigations [19]. As such, there is a growing need for robust and secure digital 
forensics solutions to ensure the integrity and reliability of digital evidence in the event of safety accidents or 
cyber-attacks. Nan Xiao et al. proposed a novel blockchain-based digital forensics framework to address these 
challenges by providing a tamper-proof, non-repudiable, and permanent storage of digital forensic data, 
enabling effective investigation and responsibility determination in the event of safety accidents in HoT 
environments [14]. 


MCDM methods evaluate and prioritize multiple competing criteria to aid decision-making processes [20]. In 
implementing a blockchain-based digital forensic scheme within the IoT communication architecture, 
MCDM methods balance security, scalability, interoperability, cost, and compliance. In this paper, we use the 
hybrid T2NN-Entropy-ARAS MCDM method that combines the Type-2 neutrosophic numbers (T2NN) 
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technique with the Entropy method and the Additive Ratio Assessment (ARAS) method. The T2NN is a 
type of neutrosophic number that handles uncertainty and imprecision in decision-making [22]. The Entropy 
method is an objective MCDM method that uses the concept of Entropy to determine the weights of criteria 
[24]. The ARAS method is an MCDM method that uses an additive ratio to evaluate and prioritize alternatives 
[25]. The T2NN-Entropy-ARAS method evaluates and prioritizes blockchain-based digital forensic schemes 
within IoT communication architecture based on integrity, immutability, decentralization, and security 


criteria. 


The motivation is to address the growing need for secure digital forensics in IloT using blockchain 
technology. The aim is to develop a comprehensive framework that ensures the integrity and reliability of 
digital evidence in HoT environments. Additionally, this framework will include a decision-making tool to 
evaluate and prioritize blockchain-based digital forensic schemes. The paper contributes to the field of HoT 
and digital forensics by: 


e Investigating the integration of blockchain technology with HoT to address security and integrity 
challenges in digital forensics. 


e Applying a novel blockchain-based digital forensics framework for IoT environments. 


e Developing a hybrid MCDM method using T2NN, Entropy, and ARAS to evaluate and prioritize 
blockchain-based digital forensic schemes in HoT communication architectures. 


This paper is organized as follows: Section 2 provides a comprehensive review of the literature on HoT 
security, blockchain technology, and digital forensics. It also introduces the MCDM methods used in the 
paper. Section 3 describes the T2NN-Entropy-ARAS method for evaluating and prioritizing blockchain- 
based digital forensics. Section 4 presents a case scenario of a safety accident in an IoT environment and 
describes how the proposed blockchain-based digital forensics framework can be used to ensure the integrity 
and reliability of digital evidence. Section 5 applies the TZ2NN-Entropy-ARAS method to the case scenario 
and presents a sensitivity and comparative analysis of the results. Section 6 summarizes the findings of the 
paper and also discusses the implications and limitations of the proposed blockchain-based digital forensics 


framework. 
2 | Literature Review 


In this paper, the surveyed literature is divided into three parts. The first part reviews existing studies that 
explore the application of blockchain technology in HoT environments. The second part reviews existing 
studies that utilize the T2NN method in MCDM applications. The third part reviews existing studies that 
utilize the Entropy and ARAS methods in MCDM applications. 


2.1 | Related Studies about IloT and Blockchain 


Blockchain technology can provide a secure and decentralized platform for data storage, sharing, and 
authentication in IoT systems, addressing specific security challenges such as data integrity and authentication 
[11]. Dawei Li et. al, discusses a blockchain-based authentication framework for IloT devices using Physical 
Unclonable Functions (PUFs) to ensure the security of data sources [27]. Libo Feng et al. discuss a cross- 
domain authentication method for the HoT that combines blockchain technology with a certificateless 
signature scheme [10]. Yi Li et al. discuss the importance of security provisioning in HoT, the role of 
blockchain technology in ensuring trust and transparency, and the concept of digital twins in Industry 4.0 
[11]. Feng Zhang et al. present a blockchain-based cloud-edge-end framework and design a trust mechanism 
based on blockchain consensus for Al-enabled IoT systems [12]. In [21], the Best-Worst Multi-criteria 
Decision-Making Method (BWM) and the Compromise Ranking Method (VIKOR) is combined for 
workflow scheduling to handle priority tasks for fault tolerance in HOT. The scholars in [27] presented a 
security analysis of loT systems using digital forensic incident response (DFIR) and discuss the role of DFIR 
in securing industrial control systems (ICS), cyber-physical systems (CPS), and SCADA systems. Victor R. 
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Kebande et al. provide a systematic review of digital forensics in the context of HoT and discuss the challenges 
and opportunities of digital forensics in oT environments [28]. 


2.2 | Literature of MCDM using T2NN 


Mohamed Abdel-Basset et al. proposed the T2NN method and defined some of its operational rules. The 
T2NN can accurately describe real cognitive information in the decision-making process [22]. Neutrosophic 
set theory is an extension of fuzzy set theory that deals with incomplete, indeterminate, and inconsistent 
information. T2NN further extends this concept to handle uncertainty at a deeper level, making it suitable 
for decision-making in complex and uncertain environments [23]. T2NN can be used in MCDM models to 
handle uncertain and incomplete information [29]. A T2NN is defined as a set of three membership functions: 
Truth (T), Indeterminacy (1), and Falsity (F), which are used to represent the degree of truth, indeterminacy, 
and falsity of a statement, respectively [22]. Pritpal Singh discusses a type-2 neutrosophic-entropy-fusion- 
based multiple thresholding method for brain tumor tissue structure segmentation [30]. Muhammet Deveci 
uses T2NN with multi-attributive border approximation area comparison (MABAC) method for offshore 
wind farm site selection in the USA [29]. Vladimir Simić et al. use T2NN with the ITARA-EDAS model to 
evaluate sustainable route selection of petroleum transportation [31]. Zeyuan Wang et al. proposes a Type-2 
neutrosophic number with modified TODIM for green supplier selection [32]. 


2.3 |Entropy and ARAS methods 


These MCDM methods can be used to solve complex decision-making problems with multiple criteria and 
alternatives [33]. Entropy is one of the most used methods in decision-making processes to calculate the 
objective weights of criteria [24]. The method quantifies the uncertainty or disorder within a system [34]. The 
idea is that a criterion with high entropy (Le., high uncertainty) is less important, while a criterion with low 
entropy (i.e., low uncertainty) is more important [35]. After determining the weight for each criterion, another 
MCDM method is applied to rank alternatives based on these weights. The ARAS method assesses the 
performance of each alternative in decision-making by calculating the ratio of its weighted sum of the 
favorable and the weighted sum of non-favorable aspects [25]. This ratio is then used to rank the alternatives 
[36]. It's a useful tool in decision-making scenarios where there are multiple options and criteria to consider. 
Note that some literature uses entrpy-ARAS method in different ways. Also, [20] proposed entropy and ARAS 
for the site selection of a hydroponic geothermal greenhouse. Mishra et al. use the fuzzy ARAS method based 
on entropy [37]. Shankha Shubhra Goswami et al. implemented the entropy-ARAS for the selection of best 
engineering materials [38]. 


3 | Research Methodology 


For the sake of brevity, the research methodology is divided into two parts. The first part explains some basic 
concepts and definitions of T2NN. The second part introduces the hybrid method used to evaluate 
blockchain-based digital forensics. 


3.1 | Preliminaries 


Definition 1 [22]. Consider that Z is a limited universe of discourse, and F [0,1] is the set of all triangular 
neutrosophic numbers on F [0,1]. 


A Type 2 neutrosophic number set (T2NNS) U in Z is represented by: 
T = (Tr (z), To) Trg (z)), (Ir, (2), Ip Ip, (2)), (Fr, (z), Fiz (z), Fr, (2))) (1) 


Where Ty(z) : Z > F[0,1] ,fy(z): Z > F[0,1],Fy(z):Z > F[0,1]. 
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The type -2  neutrosophic number set Yy) = (Tr, (2), Tiy (2), Tr, (@)) = 
(1752), lig 2r (@)) Žu = (Fr (2), Fiy (2), Fry(2)) defined as the truth, indeterminacy and 
falsity member-ships of z in U respectively. 


Definition 2 [22]. Let 
= (Tr, (z), Tiy (2), Tr, (2), Ur, @,h,@.1rg@), (Fry 2), Fig 2); Fry) > 
i, = (Tro, (2), Tig, D Trg, D) (Ing, D ipn O leg, @), (Fran Fig, e) Fry w)) and 


O= (Trg, O Tiy E): Tr B): (lrg O ig Olr p O) (Fr O Fi E Frg,@)) by three 
T2NN and À > 0. Their operations are defined as follow: 
e T2NN Addition: 
É (z) + Tra, (z) - Try (2). Tr C) Try, @) + Trg, @) — Tig, O- Tiz A 
Tre, O + Tro O — Tr, (2). Tro) 
(lrg, O-lrgg Oo lig, @ lig, @Deleg, @)- leg, (2), 
(Fry, 2)- Frgg (2): Fig, (2): Figg (@), MORO) 


7, OU, =< ) 2 
e T2NN Multiplication: 
T, 8&0, = 


(frs, ORORO MON MORA @)) 


Ing (2) + lr) — 
(C=) (= hy : o ae )) O 


Fp (2) + Fe (2) >) 


[nt + Frp (2) — Fog, B- Frp D) (En D + Figg @ - Fig, @-Fig @)) ‘| a ae 


e Scaler function: 
AO = ((l-(1-Tr, (4, 1-0 -Tp 1-1- Tr @)*), 
CUr ED CDr @)*), Fry E Fig C) Fry eD (4) 
Definition 3 [22]. 


Suppose that U; = 


(Pry, O Tig O) Trg O): (Frgg@Aigg(2)-47p,(2)) (Fg, (2+ Fig, Erp O) 
Where S = 1, 2, ..., m is a group of TZ2NNs and w = (wi, wa, ... Wm)! 


Denotes the weight vector of them with W; € [0,1] and Xim=1 Ws = 1 the following equation is used to 
calculate a Type 2  netrosophic number weighted averaging (T2NNWA) _ operator: 
T2NNWA ( Uy,... U5, ..., Um) = w10 PB ws; @.....PWmUm = B (wU; ) 

A- [Re -Try CDs, A= al S- Tr, "s, = Wet Te CD”), 

(Ts Irz, O)”, Msta ly, D", Hst Iras @))y”*), 
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(Ts Fra, C)": , 5+1 Fig, OD", Usa. Fry, (z))"5)). 6) 
Definition 4 [22]. Suppose that 
T = (Tr (2), Ti (2), Tr, (2)), Urg 2, I C), Ie, 2)), (Fra 2), Fig 2, Fry (2))) is T2NN 


Score function is calculated as follow: 


sO) = = (s + (Tr,,(Z) +2(Tig,(2)) + Trg, (2)) - (rg, @) +2 (lg, @) + trp, @)- 
(Fra D +2 (Fig, D) + FranZ) © 
Table 1. T2NN linguistic variables to distinct experts. 
Experiences (years) Linguistic variables The type 2 neutrosophic number scale 

5< Very Bad (VB) ((0.20,0.20,0.10),(0.65,0.80,0.85),(0.45,0.80,0.70)) 

[5,10] Bad (B) ((0.35,0.35,0.10),(0.50,0.75,0.80),(0.50,0.75,0.65)) 

[10,15] Medium Bad (MB) ((0.50,0.30,0.50),(0.50,0.35,0.45),(0.45,0.30,0.60)) 

[15,20] Medium (M) ((0.40,0.45,0.50),(0.40,0.45,0.50),(0.35,0.40,0.45)) 

[20,25] Medium Good (MG) ((0.60,0.45,0.50),(0.20,0.15,0.25),(0.10,0.25,0.15)) 

[25,30] Good (G) ((0.70,0.75,0.80),(0.15,0.20,0.25,),(0.10,0.15,0.20)) 

>= 30 Very Good (VG) ((0.95,0.90,0.95),(0.10,0.10,0.05), (0.05,0.05,0.05)) 


3.2 |The Hybrid TZ2NN-Entroy-ARAS Method 


This model has two Phases. In the first one, the reputation of the experts is determined under the TZ2NN 
environment by making the trade-off between their experiences and expertise [39]. Then, in the second phase, 
the T2NN-Entropy-ARAS method is applied to solve the MCDM problem. 


Table 2. T2NN linguistic variable for rank alternatives. 


Linguistic variables The type 2 neutrosophic number scale 
Very Bad (VB) ((0.20,0.20,0.10),(0.65,0.80,0.85),(0.45,0.80,0.70)) 
Bad (B) ((0.35,0.35,0.10),(0.50,0.75,0.80),(0.50,0.75,0.65)) 
Medium Bad (MB) ((0.50,0.30,0.50),(0.50,0.35,0.45),(0.45,0.30,0.60)) 
Medium (M) ((0.40,0.45,0.50),(0.40,0.45,0.50),(0.35,0.40,0.45)) 
Medium Good (MG) ((0.60,0.45,0.50),(0.20,0.15,0.25),(0.10,0.25,0.15)) 
Good (G) ((0.70,0.75,0.80),(0.15,0.20,0.25,),(0.10,0.15,0.20)) 
Very Good (VG) ((0.95,0.90,0.95),(0.10,0.10,0.05), (0.05,0.05,0.05)) 


Phase 1. TZ2NN expert reputation rating 


In this first phase, the reputation of experts is determined under the T2NN environment, which involves 
making a trade-off between their experiences and expertise. This is a crucial step in evaluating the credibility 
of the experts. 


Let A = {Aj, Ag, ...Am} and a set of criteria is symbolized by C = {Ci, C2, ..., Cn}. Let decision makers = 
{DMi, DM,, ... DMx} (k22) be a set of decision makers group. In this phase, T2NN approach is used as 
follows: 


Step 1.1. Construct the T2NN expert reputation matrix U as: 
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DM: . DM: 
Try, (1) (z), Tina (z), Tr. (1) (z)) f (are (z), Tino C) O) , 
(rg a@lig@@lega@)) = OAOA O) B 
= (Fre) @ Fino) Fraa) (Fraa Fran Fraa) n 
(Tr Tino) Trn (z)) f (Truo (2), Tia C) Tra @) i 
CCOR ORO) A R OONO) 


(Fro), Fino) Fra) (z)) (Frano, Fia (z), Fra (z)) 


Where P = (Tryo Tino e Trg, @) (rao inao rno), 
U1 U1 Ti Ti wi Ti 
(Frac) (z), Fina) Fraa (z)) 


And oe = (Trp ,(2) (2), Trg, (2) (2), Trao) rao noO rno), 


(Fro. ON AAO) 


are T2NN represent the appraisal of the experiences and expertise of the experts. The T2NN linguistic terms 
presented in Table 1 are used to distinguish experts according to their experiences and expertise. 


Step 1.2. Aggregate the reputation of the experts: 
Ge =r2nnwa (0,0) =409 a oP =e (40%) 
(i= Mi- - Trao (z))*,1— M- - Tao E) 1- M1- Traa) (z))%, 
(Mi=: lps, (4) (z))**, Ti- fre, (1) (z))**, Tas Ira (Z))*), 
(Itz: Fraa) E) Mi= Fino E), Mi= Fr (1) (2))*")) (8) 


In this equation ¢,,¢2 denotes the trade-off parameters of the reputation of the experts, where ¢,,¢2 € 
[0,1] and Çi, +2 =1. 


Step 1.3. Then the score function of the aggregated reputation is calculated as follows: 


s@e) = = (s a (Tr,,(2) ry) ( Tiz (2)) + Tre, (z) z (Irz (Z) +2 (ig. (2)) + Ing, (Z)) e 
(Fro, (+2 (Fiz (2)) + Fro, (2))) (9) 
Step 1.4. Determine the reputation of the experts. 

5. = E e =1,...k (10) 


Phase 2. T2NN-Entropy-ARAS 


The T2NN-Entropy-ARAS method is applied to solve the MCDM problem. The approach takes into account 
the entropy in the decision-making process and uses the ARAS to rank alternatives. 


Step 2.1. Build the T2NN initial decision matrix as experts express their opinions using linguistic terms in 
Table 2. 


Step 2.2. Aggregate the TZNN decision matrix by using the TANNWA equation and by using the reputation 
rate of experts that was calculated in the previous phase. 
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Step 2.3. The score function is used to convert the TZ2NN matrix into crisp numbers so decision matrix will 
be like that 


G O Cn 
Ay [X11 %12 Xin 
M= Az *24 X22 Xeon 
Aml*%m1 Xm2 .. Xmn 


Step 2.4. Normalize the decision matrix (performance indices) to obtain the feature weight Pj; for the ith 


alternative and jth criterion 


Pip = oe Whetel<i<m,1<j<n (11) 


i=1 *ij 
Step 2.5. The output entropy measure e; of the jth factor 
ej = =k Dili (Piy -In Pij) where 1 Sj <n (12) 
k= 1 Inm 
Step 2.6. Calculation of variation coefficient of jth factor e; 
gj = |1- e| wherel <j <n (13) 
Step 2.7. Calculation of objective weight of the entropy W; 


Ij 
= 14 
J wie 9j ( ) 


Step 2.8. From the decision matrix select Xoj is the optimal value for j criteria. When the optimal value of 


the criteria is unknown, then 


maxx;; if thej € B T 

Xoj = min x;j if thej €C ua 
Step 2.9. Normalize the matrix using these two stages: 
The criteria, whose preferable values are maxima, are normalized as follows: 
—— Xi; 
X, = = 16 

Jo Seo Xi eo) 
The criteria, whose preferable values are minima, are normalized by applying a two-stage procedure 

1 ym! Xij 
ar a H 


Step 2.10. Defining the normalized-weighted matrix Ki . Itis possible to evaluate the criteria with weights 
0 < W; < 1. Normalized-weighted values of all the criteria are calculated as follows: 


X= Xj. W; i= 0,...,m (18) 
Step 2.11. The following task is determining values of the optimality function $: 
S,= Djl  i=0,....m 3 j=1,...m (19) 


Step 2.12. The degree of the alternative utility is determined by a comparison of the variant, which is analyzed 
with the ideally best one Sp. The equation used for the calculation of the utility degree K; of an alternative ai 
is given below: 
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K,= > i=0,..m (20) 


where S; and Spo are the optimality criterion values. 


Step 2.13. Finally: rank the alternatives based on Kq values. Note that the calculated values Kj are in the 
interval [0, 1] and can be ordered in an increasing sequence, which is the wanted order of precedence. The 
complex relative efficiency of the feasible alternative can be determined according to the utility function 
values. 


4 | Case Study 


The IoT involves interconnected devices and systems in industrial settings, such as manufacturing, energy, 
and logistics. These systems generate vast amounts of data and require robust mechanisms to ensure data 
integrity and security, especially when it comes to digital forensics. A novel blockchain-based digital forensics 
framework has been proposed to address challenges in digital evidence collection and responsibility 
determination for industrial safety accidents involving oT device nodes [14]. A blockchain-based framework 
offers a promising solution to meet these criteria by leveraging the properties of blockchain technology to 
enhance the preservation, security, and reliability of forensic evidence. This scheme can be implemented using 
a decentralized blockchain storage mechanism to store digital forensic data, smart contract mechanisms to 
facilitate efficient retrieval and tracing of related evidence chains and a token mechanism for access control 
to enhance the data security of IoT device nodes [40]. To enhance the data security of IoT device nodes, a 
token mechanism is implemented for access control. Moreover, to meet real-time evidence acquisition 
requirements in IoT, an efficient batch consensus mechanism is proposed. Experimental simulations 
demonstrate the superiority of the novel consensus algorithm compared to the traditional Delegated Proof- 
of-Stake (DPOS) consensus in the proposed scheme for the HoT environment [14]. The key criteria for a 
Blockchain-Based Digital Forensics Framework in HoT is given by [18, 40-41]: 

e C1: Decentralization and Security: Employ a decentralized blockchain network to mitigate the risk 

of single points of failure and enhance the overall security of data storage and communication. 


e C2: Data Integrity and Immutability: Utilize blockchain’s immutable ledger to store cryptographic 
hashes of data and forensic evidence. This ensures that once data is recorded, it cannot be altered, 
guaranteeing its integrity. Implement robust hashing algorithms to create unique fingerprints for data, 
which are then stored on the blockchain. 


e C3: Transparency and Traceability: Maintain a comprehensive audit trail of all transactions and 
interactions with forensic data. This includes time-stamped records of data collection, transfer, and 


analysis. 


e C4: Scalability and Efficiency: Integrate edge computing to preprocess and analyze data locally, 
reducing latency and bandwidth usage. This is critical in handling the high volume of data generated 
by IoT devices. 


e C5: Interoperability and Integration: Ensure the framework can seamlessly integrate with existing 
IoT systems and devices, allowing for real-time data acquisition and evidence collection. Adopt and 
promote industry standards for data formats and communication protocols to facilitate 
interoperability among diverse HoT devices and systems. 


Table 3. Experts data. 


Experts Experiences Expertise Occupation 
DM1 6 Medium Bad Industry 
DM2 4 Very Good Industry 
DM3 11 Good Industry 


DM4 Z Medium Bad Industry 
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Experts 


DM1 
DM2 
DM3 
DM4 


5 |Research Findings 


In this section, the hybrid T2ZNN-Entropy-ARAS method is applied through a case study. Then the result is 
obtained and also discussed and sensitivity and comparative analysis is also applied. 


5.1 | Application of TZ2NN-Entropy-ARAS Method 


Phase 1. T2NN expert reputation rating 


Step 1.1. Four experts are employed to be a part of this application, and their information is shown in Table 
3. The T2NN expert reputation rating matrix is calculated using Eq. (7) and Table 1 to express linguistic 
variables into T2NN, as shown in Table 4. 


Step 1.2. The trade-off parameters for the base case are equal, which means that ¢,,= ¢2 = 0.5 using Eq. (8) 
T2ZNNWA to aggregate the matrix in Table 6. 


Step 1.3. Then calculate the Score function for the aggregated matrix using Eq. (9) and finally using Eq. (10) 
to determine the reputation rating as shown in Table 5. 


Table 4. T2NN reputation rating matrix. 
Experience Expertise 
Tt Ti Tf It Ii If Ft Fi Ff Tt Ti Tf It ji If Ft Fi 
0.35 | 0.35 0.10 0.50 0.75 080 0.50 0.75 0.65 0.50 030 050 050 035 045 0.45 0.30 
0.20 0.20 0.10 065 080 085 045 0.80 0.70 0.95 0.90 0.95 010 010 0.05 0.05 0.05 
0.40 045 050 040 045 050 035 040 045 0.70 0.75 080 015 0.20 0.25 0.10 0.15 
0.35 | 0.35 0.10 050 0.75 080 050 | 0.75 0.65 0.50 030 050 050 035 0.45 0.45 0.30 


Table 5. Expert’s reputation rating. 


Score Reputation 


DM2 (0.80, 0.72, 0.79),(0.25,0.28,0.21),(0.15,0.20,0.19) 0.77 0.33 
DM3 (0.58, 0.63, 0.68),(0.24,0.30,0.35),(0.19,0.24,0.30) 0.70 0.30 
DM4 (0.43, 0.33, 0.33),(0.50,0.51,0.60),(0.47,0.47,0.62) 0.44 0.19 


Phase 2. TZ2NN-Entropy-ARAS 


Step 2.1. Our experts express their opinions using Table 2 to build the T2NN initial decision matrix for five 
criteria and four alternatives as represented in Table 6. 


Step 2.2. Use the TZNNWA equation to aggregate the decision matrix by considering the reputation rate of 
the experts computed in the previous phase in Table 5. 


Step 2.3. The score function for the aggregated matrix is computed. By taking into account that beneficial 
criteria are C1, C2, and C5, and non-beneficial criteria are C3 and C4. 


Step 2.4 to 2.7. First, normalize the matrix using Eq. (11) to get a normalized decision matrix as shown in 
Table 6. Then, compute the output entropy measure ej of the jth factor using Eq. (12). Calculation of 
variation coefficient of jth factor e; by Eq. (13) Finally, calculate the objective weight of the entropy Wj using 
Eq. (14) as shown in Table 7. 


Step 2.8 to 2.13. Using the decision matrix in Table 6 to select Xo; the optimal value for each criterion using 
Eq. (15), so the modified decision matrix is presented in Table 8. Then, normalize the matrix using the two 
stages: a) for the beneficial criteria by applying Eq. (16), and b) for the non-beneficial criteria by applying Eq. 


= 


(17). Defining the normalized-weighted matrix X, as weight is calculated by the Entropy method in the 


Ff 
0.60 
0.05 
0.20 
0.60 
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previous steps and shown in Table 7. The weighted normalized matrix is shown in Table 9. Using Eq. (19) to 
determine the value of the optimality function S; to compute the degree of the alternative utility. The utility 
degree Kjof an alternative is computed using Eq. (20) as presented in Table 9. Finally: rank the alternatives 
based on K; values. 


From these steps the final ranking is ordered as Alt3 > Alt2 > Alt4 >Alt1. 


Table 6. Decision matrix. 


C1 C2 C3 C4 C5 
Alt1 0.72 0.55 0.39 0.77 0.31 
Alt2 0.42 0.58 0.63 0.50 0.65 
Alt3 0.82 0.67 0.58 0.64 0.69 
Alt4 0.51 0.65 0.49 0.83 0.54 


Table 7. Entropy weight. 
Cl C2 C3 C4 C5 


Ej 0.974522 0.997614 0.988926 0.987544 0.970966 
1-Ej 0.025478 0.002386 0.011074 0.012456 0.029034 
Wj 0.316774 0.029668 0.137686 0.154873 0.360999 


= 


Table 8. ARAS decision matrix. 


Ci+ C2 + C3 - C4 - C5 + 
Alt1 0.72 0.55 0.39 0.77 0.31 
Alt2 0.42 0.58 0.63 0.50 0.65 
Alt3 0.82 0.67 0.58 0.64 0.69 
Alt4 0.51 0.65 0.49 0.83 0.54 
X0 0.82 0.67 0.39 0.50 0.69 


Table 9. ARAS rank. 
weighted Normalized matrix 
C1 + C2 + C3 - C4 - C5 + Si Ki Rank 
Alt1 | 0.069618 0.005214 0.033689 0.025072 0.038751 0.172343 0.707278 


Alt2 0.040061 | 0.005522 | 0.020925 0.038208 0.082096 0.186811 0.766656 2 
Alt3 0.079181 | 0.006378 0.022745 | 0.030197 0.086214 0.224715 0.92221 1 
Alt4 | 0.048734 0.006175 0.02664 0.023189 0.067723 | 0.17246 | 0.707759 3 


X0 0.08 0.01 0.03 0.04 0.09 0.24 1 


5.2 |Discussion 


The hybrid T2NN-Entropy-ARAS method effectively evaluates and ranks alternatives in blockchain-based 
digital forensics within HoT, considering multiple criteria and expert opinions. The integration of T2NN 
enables the handling of uncertainty and vagueness inherent in expert opinions, while the Entropy method 
provides an objective calculation of criterion weights. The higher the variability, the higher the weight assigned 
to that criterion. As shown in Table 7, the final weight calculation reveals that criterion C5 is the most 
important, followed closely by C1, and criterion C2 is deemed the least important. ARAS evaluates and ranks 
alternatives by calculating their utility degrees, which incorporate both the criteria weights and the 
performance scores of the alternatives. The results indicate that Alt3 is the top-ranked alternative, followed 
by Alt2, Alt4, and Alt1, respectively. This ranking is determined by the utility degree of each alternative, which 
takes into account both the weights of the criteria and the performance of each alternative. 
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5.3 | Sensitivity Analysis 


Sensitivity analysis is conducted to validate the effectiveness of the hybrid T2NN-Entropy-ARAS model, 
specifically assessing its robustness in the context of blockchain-based digital forensics within the HoT. This 
is achieved by changing the trade-off parameters ¢4 in the base case scenario ¢, = ¢2 = 0.5. By varying 
the ¢, within the range of [0,1] analyzes the sensitivity. The ¢, = 0 indicate the expertise only and ¢, = 1 
show that experiences only and are shown in Figure 1. The weight of the TZ2NN-Entropy method was affected 
by changing the trade-off in nine cases from 0 to 1. Figure 2 shows the T2NN-ARAS rank when weight is 
chaining according to weight change in the nine cases. 


Sensitivity analysis is essential to validate the robustness of the hybrid TZ2NN-Entropy-ARAS method for 
evaluating blockchain-based digital forensics in IoT environments. By varying the trade-off parameter ¢1 ,¢2 
which balances expertise and experience, we can assess how variations in this parameter affect the weight 
calculations and subsequent rankings of alternatives. In the base case ¢, = ¢2 = 0.5 indicating equal 
importance. The range ¢; varies between 0 and 1, where ¢, =0 implies only expertise, and ¢; =1 implies only 
experience. Recalculate the weights using T2NN-Entropy method based on nine cases by changing the value 
of ¢,. Figure 1 shows how the weights of the criteria changes as ¢, varies from 0 to 1. Each line represents 
the weight of a specific criterion, demonstrating the sensitivity of weights to the trade-off parameter. Then 
apply the adjusted weights to the T2NN-ARAS method to recalculate the utility degrees and rankings of the 
alternatives. Track the rankings for each of the nine cases as shown in Figure 2 which illustrates the rankings 
of the four alternatives (Alt1, Alt2, Alt3, Alt4) across the nine cases. Each bar or line represents the ranking 
position of an alternative in each case. The sensitivity analysis confirms the robustness of the hybrid TZ2NN- 
Entropy-ARAS method. The top-ranked alternative Alt3, remains consistently high across different trade-off 
parameter configurations, underscoring its suitability for blockchain-based digital forensics in HoT 
environments. The analysis demonstrates the method's ability to handle uncertainty and varying expert 
opinions effectively, ensuring reliable decision-making. 


Case 1 


Case 6 
Figure 1. Sensitivity analysis on weight. 


Case 1 


== Alt1 
== Alt2 
== Alt3 
== Alt4 


Case 6 


Figure 2. Sensitivity analysis on rank. 
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5.4 | Comparative Analysis 


To further validate the robustness and effectiveness of the proposed hybrid TZ2NN-Entropy-ARAS method, 
we perform a comparative analysis using the Entropy-VISOR method. VIKOR (Vise Kriterijumska 
Optimizacija I Kompromisno Resenje) is a MCDM method that focuses on ranking and selecting from a set 
of alternatives in the presence of conflicting criteria, emphasizing the closeness to the ideal solution [42]. 
Using the Entropy method, the weights are calculated for each criterion, emphasizing their relative 
importance. These weights are used in both the ARAS and VIKOR methods for consistency. Table 10 shows 
the final rank using VIKOR method. The VIKOR indices Qj are computed, and the alternatives are ranked 
accordingly. Using the previously determined weights and criteria, the rankings derived from the ARAS 
method are compared with those obtained from the VIKOR method. 


Table 10. VIKOR rank. 
Ci+ C2+ C3 - C4 - C5 + Si Ri Qj Rank 
Alt1 0.08 0.03 0.00 0.13 0.36 0.59 0.36 0.015609 4 
Alt2 0.32 0.02 0.14 0.00 0.03 0.51 0.32 — 0.201842 3 
Alt3 0.00 0.00 0.11 0.06 0.00 0.17 0.11 1 1 
Alt4 0.25 0.01 0.06 0.15 0.14 0.61 0.25 — 0.226738 2 


The comparative analysis using the Entropy-VIKOR method supports the findings from the hybrid T2NN- 
Entropy-ARAS method, demonstrating consistent rankings and validating the robustness of the evaluation 
framework. The Private Blockchain Deployment (Alt3) is affirmed as the most suitable alternative for 
blockchain-based digital forensics in IoT, followed by the Hybrid Blockchain Approach (Alt4), as shown in 
Figure 3. This consistency across different MCDM methods enhances confidence in the decision-making 
process, ensuring reliable and effective implementation of blockchain technologies in IoT digital forensics. 
Both ARAS and VIKOR methods rank Alt3 as the top alternative. This consistency underscores Alt3's robust 
performance across multiple criteria and evaluation methods, validating its suitability for blockchain-based 
digital forensics in IoT. 


05 m ARAS Si 
0.4 m VIKOR Qj 


0.2 
0 <= 


Alt1 Alt2 Alt3 Alt4 


Figure 3. ARAS and VIKOR rank. 
6 | Conclusions 


Blockchain technology offers significant potential in the context of IoT forensics. However, the 
implementation of such systems presents challenges that must be addressed, including scalability, 
interoperability, data privacy, and real-time processing. These challenges can be overcome through the 
development of advanced blockchain solutions, the optimization of data processing techniques, and the 
integration of data privacy and security protocols. By adopting blockchain technology and incorporating 
MCDM methods, IoT forensics can provide secure, reliable, and transparent data analysis and evidence 
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preservation. In this paper, we have presented a novel approach to integrating blockchain technology with 
IoT digital forensics using a hybrid MCDM method, specifically the T2NN-Entropy-ARAS method. This 
integration addresses the critical need for data integrity, security, and transparency in HoT environments. Our 
approach aims to enhance the reliability and robustness of digital forensic investigations, ensuring that digital 
evidence remains tamper-proof and traceable. The potential of blockchain technology to mitigate security and 
integrity challenges in oT. The immutable and decentralized nature of blockchain makes it a suitable solution 
for storing and managing forensic data, ensuring that once data is recorded, it cannot be altered or tampered 
with. T2NN-Entropy-ARAS method is applied to evaluate and prioritize blockchain-based digital forensic 
schemes. The T2NN approach effectively handles uncertainty and imprecision in expert opinions, while the 
ENTROPY method objectively determines the weights of evaluation criteria. The ARAS method then ranks 
the alternatives based on their utility degrees. 


6.1 | Future Considerations 


The hybrid TZ2NN-Entropy-ARAS method has proven effective in evaluating and ranking alternatives based 
on multiple criteria. However, continuous advancements in blockchain technology and HoT could shift these 
evaluations over time. It is crucial for organizations to periodically reassess their choices and stay updated 
with technological advancements and evolving security standards. Future research could explore integrating 
additional criteria such as Access Control, Privacy, Legal and Regulatory Compliance, further refining the 
decision-making process for HoT digital forensics. Future work could extend this analysis to include 
additional criteria or explore other hybrid methods to further enhance the robustness of the evaluation 
process. 
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